[UPDATE NOW] PHP RCE Vulnerability (CVE-2026-109618 and CVE-2026-109619)
### Summary See the links for context: https://cert.europa.eu/publications/security-advisories/2026-018/ https://www.php.net/archive/2026.php#2026-10-20-1 https://jackalsyn.com/posts/php-up-2026.html PHP will release a fix for a serious RCE flaw today (oct 21st) at 2 pm UTC As per CERT-EU, mitigation by disabling or restricting internet access to affected systems is highly recommended, which is undesirable for productive systems. As Mailcow uses PHP extensively, a timely patch for this vulnerability is required to safely operate it further. ### Motivation Security ### Additional context _No response_
Posted by cyberdust2k on Oct 21, 2026, 4:37 AM
Tags
Related issues
- Server requests and latency increased after upgrading from Next.js 15 to 16
- Leak of Geedge Networks internal documents (100,000+ from Jira, Confluence, GitLab)
- Can't download videos from YouTube on cobalt.tools
- `google_service_networking_connection` produce an error when trying to destroy the resource
- WebGPU-based renderer for the editor
- Zed downloads NodeJS binary and npm packages from Internet without user’s consent
Raise real-world problems, find people facing the same issue, and discuss solutions.2,000 issues0 comments
github (Network)
[UPDATE NOW] PHP RCE Vulnerability (CVE-2026-109618 and CVE-2026-109619)
Server requests and latency increased after upgrading from Next.js 15 to 16
Leak of Geedge Networks internal documents (100,000+ from Jira, Confluence, GitLab)
Can't download videos from YouTube on cobalt.tools
`google_service_networking_connection` produce an error when trying to destroy the resource
WebGPU-based renderer for the editor
Zed downloads NodeJS binary and npm packages from Internet without user’s consent
FR: Allow custom domains for Tailscale Funnel
[UPDATE NOW] PHP RCE Vulnerability (CVE-2026-109618 and CVE-2026-109619)
### Summary See the links for context: https://cert.europa.eu/publications/security-advisories/2026-018/ https://www.php.net/archive/2026.php#2026-10-20-1 https://jackalsyn.com/posts/php-up-2026.html PHP will release a fix for a serious RCE flaw today (oct 21st) at 2 pm UTC As per CERT-EU, mitigation by disabling or restricting internet access to affected systems is highly recommended, which is undesirable for productive systems. As Mailcow uses PHP extensively, a timely patch for this vulnerability is required to safely operate it further. ### Motivation Security ### Additional context _No response_
Comments (0)
No comments yet. Start the discussion.